$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: Z78EzIIHvjYpKpNcXhWaOBBZ9TQhN6MPfnsueKoOzso= Subject key identifier: EB:B2:E9:48:DB:CC:20:A5:34:50:E5:D3:67:01:D1:41:ED:AB:0A:4C Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9B10 Signing time: Sun 02 Nov 2025 15:17:10 +0000 Manifest this update: Sun 02 Nov 2025 15:17:09 +0000 Manifest next update: Sun 09 Nov 2025 15:17:09 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: JJp4Ezlng30U1pnG9djkS4esS2SHIaMgE0K7r0g4/bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Nov 2 15:17:09 2025 GMT Not After : Nov 9 15:17:09 2025 GMT Subject: CN=690775f5-4a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:65:c5:c3:02:c1:81:d5:4d:93:47:0e:8c: 96:06:d4:a8:c5:f6:cf:71:50:a3:00:ed:34:1b:fb: d3:a0:60:6e:fc:ab:45:15:b2:98:2e:ad:63:5b:53: 26:61:48:90:27:b3:36:c3:c7:8f:e8:58:d0:ae:c9: fc:9c:8e:ce:4a:6b:c8:25:4b:a6:6e:7d:99:57:a0: fa:87:36:d5:76:53:81:a3:5d:1a:fb:b7:a8:95:65: 4e:39:bc:f0:17:95:ca:20:ad:47:07:f6:f2:7f:37: e7:c6:b8:26:bd:74:18:06:ed:e8:e4:33:9d:ed:35: d4:8e:e4:31:40:ce:ca:ae:3d:52:75:59:cd:d2:46: 02:4b:1a:1b:4d:9e:e0:11:03:1f:51:42:53:e6:31: a0:ce:6b:13:64:12:cd:1f:04:bd:62:a6:50:f4:d5: fa:e0:1e:cb:0c:da:57:79:9c:b6:5c:b7:64:cf:cf: 6d:fd:83:19:34:96:00:33:b4:7a:5c:ee:38:f8:1a: dd:7b:2f:8f:15:4a:e1:64:33:e3:8d:ff:2c:5b:6b: 4e:98:95:bd:cf:7a:7c:a2:3f:46:d6:c6:8e:b8:ed: 9d:0a:39:65:45:5c:49:dd:02:ea:b3:20:52:8c:e5: dc:88:ee:6b:a1:b0:d2:8f:e7:ce:34:4a:62:c5:a8: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:E9:48:DB:CC:20:A5:34:50:E5:D3:67:01:D1:41:ED:AB:0A:4C X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ba:bc:f2:8d:d9:58:2a:00:87:0d:cd:99:00:e7:a6:c9:18: 14:21:e6:e5:1f:30:8a:e2:b0:08:8c:3b:d8:40:db:c1:6e:22: f9:04:ed:85:1b:da:54:b3:2b:29:9d:39:99:68:ec:3c:4e:d5: 22:d8:c1:15:ff:49:9e:7f:e0:c0:62:24:5e:b4:2d:e5:b2:cd: ea:f7:48:df:ad:4a:75:23:27:9c:db:f5:18:65:67:e4:fa:b1: 3f:eb:41:1a:0e:a2:58:97:51:a4:e2:56:a3:bd:b0:11:28:68: 8e:1c:41:67:98:29:5d:53:9b:e8:4a:8e:c6:47:b9:db:c9:73: 96:ad:f9:ca:69:61:28:02:d5:3c:36:45:84:ce:ba:51:cf:de: 4e:15:a5:0a:49:11:3c:68:08:db:d9:14:1f:a2:0b:d5:5f:df: f1:92:3e:59:db:30:9f:53:1e:81:4e:03:0d:c3:ba:5d:9c:3b: 8b:20:04:2a:49:ba:7f:66:4c:ad:ff:98:5d:04:66:d1:2d:51: e3:02:9b:6c:43:b9:bd:fb:80:91:43:c3:03:4e:3f:f2:3a:5d: e9:8a:c0:7c:28:e5:30:d4:06:65:cf:e1:a3:04:33:9e:25:fb: 1b:c2:32:de:76:21:c0:13:3f:ad:fb:8b:6d:19:a8:d1:f8:6d: c4:b3:5c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUxMTAyMTUxNzA5WhcNMjUxMTA5MTUxNzA5WjAYMRYwFAYD VQQDEw02OTA3NzVmNS00YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0RlxcMCwYHVTZNHDoyWBtSoxfbPcVCjAO00G/vToGBu/KtFFbKYLq1jW1Mm YUiQJ7M2w8eP6FjQrsn8nI7OSmvIJUumbn2ZV6D6hzbVdlOBo10a+7eolWVOObzw F5XKIK1HB/byfzfnxrgmvXQYBu3o5DOd7TXUjuQxQM7Krj1SdVnN0kYCSxobTZ7g EQMfUUJT5jGgzmsTZBLNHwS9YqZQ9NX64B7LDNpXeZy2XLdkz89t/YMZNJYAM7R6 XO44+Brdey+PFUrhZDPjjf8sW2tOmJW9z3p8oj9G1saOuO2dCjllRVxJ3QLqsyBS jOXciO5robDSj+fONEpixag95wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuy6Ujb zCClNFDl02cB0UHtqwpMMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMurzyjdlYKgCHDc2ZAOemyRgUIeblHzCK4rAIjDvYQNvBbiL5BO2F G9pUsyspnTmZaOw8TtUi2MEV/0mef+DAYiRetC3lss3q90jfrUp1Iyec2/UYZWfk +rE/60EaDqJYl1Gk4lajvbARKGiOHEFnmCldU5voSo7GR7nbyXOWrfnKaWEoAtU8 NkWEzrpRz95OFaUKSRE8aAjb2RQfogvVX9/xkj5Z2zCfUx6BTgMNw7pdnDuLIAQq Sbp/Zkyt/5hdBGbRLVHjAptsQ7m9+4CRQ8MDTj/yOl3pisB8KOUw1AZlz+GjBDOe JfsbwjLediHAEz+t+4ttGajR+G3Es1xV -----END CERTIFICATE-----Generated at Tue Nov 4 08:26:50 2025 by rpki-client